Vulnerabilities
CISA Adds ProFTPD, Strapi, Apache Struts Flaws to Known Exploited Vulnerabilities Catalog
The US CISA has added five new vulnerabilities to its KEV catalog, including flaws in ProFTPD, ONLYOFFICE Docs, and Apache Struts.
Strapi
Everything Threat Times has reported about Strapi: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CISA Adds Strapi Admin Data Leak to Known Exploited Vulnerabilities Catalog
Strapi CVE-2023-22894 allows attackers with admin access to infer sensitive user details via query filters.